[java-identity-provider COMMIT] in /trunk: idp-conf/src/main/resources/conf/services.properties idp-conf/src/main/res...

[noreply at shibboleth.net]

Author: scantor
Date: Sat Jan 24 14:56:33 2015
New Revision: 7279

URL: http://svn.shibboleth.net/view/java-identity-provider?rev=7279&view=rev
Log:
IDP-578 - Attribute resolution errors are hardwired to fail the profile flows

Modified:
    trunk/idp-conf/src/main/resources/conf/services.properties
    trunk/idp-conf/src/main/resources/system/flows/admin/resolvertest-beans.xml
    trunk/idp-conf/src/main/resources/system/flows/authn/authn-beans.xml
    trunk/idp-conf/src/main/resources/system/flows/c14n/attribute-sourced-subject-c14n-beans.xml
    trunk/idp-conf/src/main/resources/system/flows/cas/abstractValidate/abstractValidate-beans.xml
    trunk/idp-conf/src/main/resources/system/flows/saml/saml-abstract-beans.xml
    trunk/idp-profile-impl/src/main/java/net/shibboleth/idp/profile/impl/ResolveAttributes.java

Modified: trunk/idp-conf/src/main/resources/conf/services.properties
URL: http://svn.shibboleth.net/view/java-identity-provider/trunk/idp-conf/src/main/resources/conf/services.properties?rev=7279&r1=7278&r2=7279&view=diff
==============================================================================
--- trunk/idp-conf/src/main/resources/conf/services.properties (original)
+++ trunk/idp-conf/src/main/resources/conf/services.properties Sat Jan 24 14:56:33 2015
@@ -20,6 +20,7 @@
 #idp.service.attribute.resolver.resources = shibboleth.AttributeResolverResources
 #idp.service.attribute.resolver.failFast = false
 idp.service.attribute.resolver.checkInterval = PT15M
+#idp.service.attribute.resolver.maskFailures = true
 
 #idp.service.attribute.filter.resources = shibboleth.AttributeFilterResources
 # NOTE: Failing the filter fast leaves no filters enabled.

Modified: trunk/idp-conf/src/main/resources/system/flows/admin/resolvertest-beans.xml
URL: http://svn.shibboleth.net/view/java-identity-provider/trunk/idp-conf/src/main/resources/system/flows/admin/resolvertest-beans.xml?rev=7279&r1=7278&r2=7279&view=diff
==============================================================================
--- trunk/idp-conf/src/main/resources/system/flows/admin/resolvertest-beans.xml (original)
+++ trunk/idp-conf/src/main/resources/system/flows/admin/resolvertest-beans.xml Sat Jan 24 14:56:33 2015
@@ -111,7 +111,8 @@
     </bean>
 
     <bean id="ResolveAttributes" class="net.shibboleth.idp.profile.impl.ResolveAttributes" scope="prototype"
-        c:resolverService-ref="shibboleth.AttributeResolverService" />
+        c:resolverService-ref="shibboleth.AttributeResolverService"
+        p:maskFailures="%{idp.service.attribute.resolver.maskFailures:true}" />
 
     <bean id="FilterAttributes" class="net.shibboleth.idp.profile.impl.FilterAttributes" scope="prototype"
         c:filterService-ref="shibboleth.AttributeFilterService" />

Modified: trunk/idp-conf/src/main/resources/system/flows/authn/authn-beans.xml
URL: http://svn.shibboleth.net/view/java-identity-provider/trunk/idp-conf/src/main/resources/system/flows/authn/authn-beans.xml?rev=7279&r1=7278&r2=7279&view=diff
==============================================================================
--- trunk/idp-conf/src/main/resources/system/flows/authn/authn-beans.xml (original)
+++ trunk/idp-conf/src/main/resources/system/flows/authn/authn-beans.xml Sat Jan 24 14:56:33 2015
@@ -41,7 +41,8 @@
     <bean id="ResolveAttributes"
             class="net.shibboleth.idp.profile.impl.ResolveAttributes" scope="prototype"
             c:resolverService-ref="shibboleth.AttributeResolverService"
-            p:activationCondition="#{ '%{idp.authn.resolveAttribute:null}' != 'null' }">
+            p:activationCondition="#{ '%{idp.authn.resolveAttribute:null}' != 'null' }"
+            p:maskFailures="%{idp.service.attribute.resolver.maskFailures:true}">
         <property name="attributesToResolve">
             <bean parent="shibboleth.CommaDelimStringArray" c:_0="%{idp.authn.resolveAttribute:null}" />
         </property>

Modified: trunk/idp-conf/src/main/resources/system/flows/c14n/attribute-sourced-subject-c14n-beans.xml
URL: http://svn.shibboleth.net/view/java-identity-provider/trunk/idp-conf/src/main/resources/system/flows/c14n/attribute-sourced-subject-c14n-beans.xml?rev=7279&r1=7278&r2=7279&view=diff
==============================================================================
--- trunk/idp-conf/src/main/resources/system/flows/c14n/attribute-sourced-subject-c14n-beans.xml (original)
+++ trunk/idp-conf/src/main/resources/system/flows/c14n/attribute-sourced-subject-c14n-beans.xml Sat Jan 24 14:56:33 2015
@@ -19,7 +19,8 @@
     
     <bean id="ResolveAttributes" class="net.shibboleth.idp.profile.impl.ResolveAttributes" scope="prototype"
             c:resolverService-ref="shibboleth.AttributeResolverService"
-            p:attributesToResolve-ref="shibboleth.c14n.attribute.AttributesToResolve">
+            p:attributesToResolve-ref="shibboleth.c14n.attribute.AttributesToResolve"
+            p:maskFailures="%{idp.service.attribute.resolver.maskFailures:true}">
         <property name="attributeContextCreationStrategy">

[... 124 lines stripped ...]